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BACKGROUND OF THE INVENTION 

A storage system is connected to at least one host computer 
and has a plurality of logical units thereinside. Further, the 
external storage system includes at least one or plural disk 
devices. The storage system and the host computer constitute 
a computer system. They are connected using an SCSI. Even in 
the case of a Fibre Channel or the like using no SCSI interface, 
a logic interface is of the SCSI. 

Such an external storage system in current use has coupling 
functions and is capable of copying logical units between the 
present system and another external storage system. These 
coupling functions include a plurality of coupling operations. 
Commands for giving instructions for the respective operations 
are prepared. These coupling operations have been normally 
executed according to issuance of their corresponding commands 
from dedicated terminals. However, a method using command 
devices was considered as a method of directly executing coupling 
operations from a host computer. The host computer issues 
commands for performing the coupling operations to the command 
devices as data to be written into the external storage system. 
The command devices are shared logical units exclusively used 
for communication with the host computer. The host computer 
writes the commands into the dedicated command devices as data, 
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whereas the external storage system processes the data written 
into the command devices as commands. Such coupling-operation 
instructions made from the host computer is executed by writing 
the command into their corresponding command devices through 
an operation application (hereinafter abbreviated as RM) or an 
operation API (hereinafter abbreviated as RMLIB) on the host 
computer. The host computer is capable of giving instructions 
for the coupling operations from the command devices to all the 
logical units lying within the external storage system. 

Meanwhile, if the instructions is written into the command 
devices, then they can be issued to all the logical units in 
the external storage system in the above related art. However, 
the following problems arise in reverse due to it. 

While the external storage system can be connected to a 
plurality of host computers, accessible logical units are 
restricted every host computers. It is thus necessary to limit 
instructions for coupling operations from a given host computer 
only to logical units treatable by the host computer. However, 
since the application on the conventional host computer is not 
provided with means for confirming whether a logical unit to 
be operated corresponds to the logical unit to be actually 
operated, which has been handled by the host computer, there 
is a possibility that the host computer will given instructions 
to a logical unit handled by another host computer , thus resulting 
in data corruption. 



Connections of the logical units have heretofore been 
performed by confirming to which connection port the host 
computer is physically connected, confirming by means of a 
service processor or the like in what configuration the host 
computer is connected, andmanually developing the result thereof 
to a defined file on the host computer. Therefore, the 
possibility that data corruption will occur due to typing errors 
of a supervisor, still remains. 

Therefore, a specific group, which makes use of a system 
(hereinafter called LUN security) implemented by Japanese Patent 
Application Laid-Open No. 2000-322369 at present and comprises 
a set of logical units in an external storage system, can be 
set so as to be recognized only by a specific Fibre Channel Port 
of a host computer. Further, the LUN security 'is extended even 
to command devices, and only command devices that belong to the 
same group, are applied so as to be able to operate their 
corresponding logical units. 

Thus, when only one Fibre Channel Port is used in the host 
computer, the group of logical units recognized by the host 
computer is one, and all the logical units recognized by the 
host computer belong to one group . Therefore , the host computer 
is capable of operating all the logical units through the use 
of command devices that belong to the group. 
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However, the current LUN security is used not only in 
security applications but also in switching between alternate 
paths. It is therefore necessary to define it as a group 1: 
WWN-A (World Wide Name corresponding to an address inherent in 
Fibre Channel Port is hereinafter abbreviated as WWN) and a group 
2: WWN-B from the relationship of the alternate paths. 

Thus, when the LUN security is in no use, command devices 
that belong to the group of WWN-A , can be used with command devices 
that belong to WWN-B as their alternatives. However, when the 
LUN security is used, the command devices that belong to WWN-B, 
allow the group 1: WWN-A different in group to disappear from 
view. Therefore, it is not possible to use them as their alternate 
command devices. 

When the security is defined as a group 1: WWN-A and a 
group 2: WWN-B from the relationship of path definition as shown 
in FIG. 2 and command devices are placed on another port, the 
host computer is capable of recognizing two command devices and 
two volumes. However, the relationship between the respective 
command devices and controllable volumes is not understood or 
recognized unless WWNs of the host computer are recognized. 

Therefore, when the LUN security is used, such a case that 
the recognized command devices cannot necessarily operate the 
logical units recognized from the host computer side, exists. 

On the other hand, the current LUN security is used even 
for path control under a Fibre-Switch environment even other 



than the original purpose of security. This means that the LUN 
security function is no more than logic path setting. Using 
this function and applying it to security for each command device 
yields execution of security by the logic path setting alone, 
thus causing inconvenience. 

An object of the present invention is to propose an 
additional mechanism necessary for an external storage system 
and an additional process for an application of each of host 
computers in order to, in a computer system in which a plurality 
of the host computers share the use of one or plural disk devices , 
limit control on logical units from each of the host computers 
to logical units recognized by the host computer, and allow the 
logical units recognized by the host computer to operate without 
restrictions . 

To this end, the external storage system is configured 
so as to provide extended Inquiry information for specifying 
each logical unit for the host computer. 

The external storage system according to the present 
invention comprises one or plural disk array controllers and 
a plurality of hard disk drives. Logical units having no 
relevance to a plurality of physical hard disk drives are 
virtually defined. The host computer is capable of recognizing 
the logical units as the hard disk drives and using the same. 

Now at least one of the logical units is dedicated for 
coupling control and is distinguished from logical units read 



and written or programmed from and to a normal host. A host 
program for controlling coupling issues coupling control 
according to the reading and writing from and to the logical 
unit (command device) dedicated for the coupling control. The 
host computers are also capable of using the control-dedicated 
logical unit (command device) with being shared between other 
ports. When discrete groups share the use of one logical unit 
at this time, they function as command devices independent of 
each host computer. 

Now the external storage system according to the invention 
of the present application defines extended LU numbers as 
management information on logical units as viewed from outside 
in order to achieve the object of the invention of the present 
application that each of the host computers can specify logical 
units . 

The extended LU number comprises a combination of a 
connection port, a target ID and a logical unit number. Thus, 
the mechanism that the host computer is capable of specifying 
the logical units, is constructed. An extended logical unit 
number storage unit for obtaining correspondence between the 
extended LU numbers and the logical units is made up of a CPU 
and a built-in memory. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a diagram showing an external storage system 



according to a first embodiment of the present invention and 
a host computer; 

Fig. 2 is a diagram illustrating an external storage system 
according to a second embodiment of the present invention and 
a host computer; and 

Fig. 3 is a diagram depicting one example of a list on 
an RM according to the present invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

A first embodiment of the present invention will be 
explained using Fig. 1. Fig. 1 is a system conf igurational 
diagram of a computer system comprising a host computer and an 
external storage system of the present invention. A host 
computer 100 and an external storage system 200 are connected 
to each other by a physical interface used as a Fibre Channel 
and a logic interface used as an SCSI. The host computer 100 
brings adapters 120 and 121 having WWN (World Wide Name) of a 
WWN-a and a WWN-b into connection. 

Logical units 240, 241, 242 and 243 exist within the 
external storage system. I/O and coupling operations are 
carried out in units of such logical units. CPUs 220 and 221 
lying within the external storage system interpret and execute 
SCSI commands in the units of the logical units. 

It is possible to allow each of the logical units to have 
a function for the coupling operation. The logical unit having 



such a function is called a command device (CM) and is capable 
of receiving read and write (R/W) accesses from the host computer . 
The logical units can be shared between a plurality of ports. 
In the logical units 242 and 243, for example, the same logical 
5 units are shared between a plurality of ports and respectively 
viewed as discrete logical units from the host side. The CMs 
230 and 231 are also similar and respectively seen as discrete 
CMs from the host computer. 

A KM 110 for controlling the coupling operation and an 
Q 10 application 101 for giving instructions to the RM 110 are m 
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03 operation on the host computer 100. The host computer reads 
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y and writes the contents of control from and to the CMs 230 and 



231 set within the external storage system 200 via the RM 110, 
thereby executing the coupling operation. The host computer 
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fn 15 is capable of executing the coupling operation only via the RM 



110. 

The external storage system 200 interprets thereinside 
the contents of data written into the CPUs 220 and 221 and executes 
a coupling operation corresponding to the contents. Logical 
unit information specified to the coupling operation in this 
case takes the system of beingmanaged within the external storage 
system. This is not information managed by the host computer 
100. In the case of UNIX , for example, the application of the 
host computer effects reading/writing on each logical unit 
according to a R/W access to a special device file. There is 



thus no method of directly recognizing the correspondence between 
the special device file and the information (connection port 
numbers, target IDs and LU numbers) managed within the external 
storage system through the use of the host computer . Accordingly , 
there was a need to acquire the information managed within the 
external storage system 200 by a method such as confirmation 
thereof by SVP upon execution of the coupling operation. In 
the present invention, the external storage system 200 adds each 
of extended LU numbers used in coupling to a response of an Inquiry 
command to a specified logical unit. 

Owing to such addition, the host computer 100 is capable 
of collecting responses of Inquiry commands to special device 
files of all storage systems recognized by the host computer 
100. It is thus possible to obtain a list 111 of extended LU 
numbers corresponding to all logical units recognized by the 
host computer. Fig. 3 shows an embodiment of a list. The 
operation thereof can also be carried out through the use of 
device special files by bringing the device special files into 
correspondence with (port numbers, target IDs and LU numbers) . 
Refusal of RM to a request of a coupling operation to other than 
the extended LU numbers on the list 111 makes it possible to 
inhibit the operation for each logical unit non-handled by the 
host computer 100. 

Fig. 1 is an embodiment showing a case illustrative of 
alternate or switch paths described in the paragraph of the 
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. problems. When LUN security is used, access to the CM 230 is 
made through the adapter 120 , thereby making it possible to carry 
out operation for the LU 242. However, when the adapter 121 
is used as the alternate path due to a failure in the adapter 
5 120, only access to the CM 231 is allowed through the adapter 
121. Therefore, the operation for the LU 242 results in an 
operation to the LU of another group and is hence refused. However 
since the groups set in adapter units like the LUN security are 
not used owing to the use of the present invention, the operation 
QIO for the LU 242 as viewed from the CM 231 at path alternation 
CO can be executed without refusal to its operation. 

ry 

In such a case as shown in Fig. 2, LUs 240 and 241 and 
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u * CMs 230 ad 231 are recognized by a host computer 100. When the 
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51 LUN security is used, the CM 230 is capable of operating only 

jml5 the LU 240, and the CM 231 is capable of operating only the LU 
ru 241. However, the host computer is unable to recognize whether 

or not they are capable of operation, unless their operations 
are actually executed. Owing to the use of the present invention, 
however, the host computer 100 is capable of operating only the 
20 recognizable LUs 240 and 241, and both the CMs 230 and 231 are 
capable of operating the LUs 240 and 241. 

Therefore, only the LUs recognized by the host computer 
can be operated without missing operationality as viewed from 
the host computer side, whereby security to the operation is 
25 enhanced. 



According to the present invention, since only the logical 
units recognized by the host computer are capable of performing 
coupling operations, security is enhanced. Further, since the 
logical units recognized without depending on the configurations 
of the adapters can be operated, availability of the system is 
enhanced. 



